CVE-2022-1973: Use After Free
A double-free in ntfs3 logreplay may lead to a crash.
Other sources
A use-after-free flaw was found in the Linux kernel in logreplay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1973?
CVE-2022-1973 has a high severity due to its potential to cause system crashes and kernel information leaks.
How do I fix CVE-2022-1973?
To remediate CVE-2022-1973, upgrade to available kernel versions 5.19 or 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.9-1, or 6.12.10-1.
Which systems are affected by CVE-2022-1973?
CVE-2022-1973 affects various Linux kernel versions including those between 5.15 and 5.19.
Is CVE-2022-1973 a remote or local vulnerability?
CVE-2022-1973 is a local vulnerability, meaning it can only be exploited by an attacker with local access to the system.
Can CVE-2022-1973 lead to data exposure?
Yes, CVE-2022-1973 can lead to a kernel information leak, potentially exposing sensitive data.